Code Pluginsource linked

AI Inner Osv0.7.4

Framework for a Claude Code plugin that surfaces visible Inner OS monologue.

ai-inner-os·runtime ai-inner-os·by @summersec
Community code plugin. Review compatibility and verification before install.
openclaw plugins install clawhub:ai-inner-os
Latest release: v0.7.4Download zip

Compatibility

Built With Open Claw Version
2026.3.24-beta.2
Min Gateway Version
2026.3.24-beta.2
Plugin Api Range
>=2026.3.24-beta.2
Plugin Sdk Version
2026.3.24-beta.2
Security Scan
VirusTotalVirusTotal
stale
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The visible inner-monologue behavior, lifecycle hooks, persona switching, and optional profile/history skills are disclosed and broadly aligned with the stated plugin purpose.
Instruction Scope
The skill intentionally injects protocol instructions that change how the agent responds, including informal monologue output; this is expected for the skill but affects session behavior.
Install Mechanism
The README offers normal marketplace/plugin installation paths, but also suggests an AI-agent install prompt that reads mutable GitHub main-branch documentation.
!
Credentials
Executable hooks are expected for this plugin, but the OpenCode plugin static finding shows shell execution constructed with a raw dynamic value, which is broader than necessary.
Persistence & Privilege
The artifacts describe per-session state and optional, explicit user-profile/history handling; no credential use or hidden long-running persistence was evidenced.
Scan Findings in Context
[suspicious.dangerous_exec] unexpected: Local command execution is expected for hook-based plugins, but the cited execSync line interpolates a dynamic name into a shell command rather than using a safer argv-based API.
[pre-scan.unicode-control-chars] expected: A control-character signal is present in the submitted artifacts, but the provided actionable text does not show evaluator-directed prompt manipulation; the compressed .tgz artifact is binary-like content.
What to consider before installing
Before installing, review the OpenCode shell-execution path or wait for a fix that uses safe argument handling. If you install anyway, prefer pinned marketplace/release installation, avoid untrusted persona names, and only enable prompt-history/profile features with narrow, explicit approval.
opencode/plugins/inner-os.js:106
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Verification

Tier
source linked
Scope
artifact only
Summary
Validated package structure and linked the release to source metadata.
Commit
465e34e8b9b2
Tag
main
Provenance
No
Scan status
suspicious

Tags

latest
0.7.4

English | 中文

<h1 align="center">AI Inner OS</h1> <h3 align="center">Make AI "come alive" while working in the terminal — by showing its inner monologue.</h3> <p align="center"> <a href="https://github.com/SummerSec/AI-Inner-Os"><img alt="AI-Inner-Os" src="https://img.shields.io/badge/AI--Inner--Os-plugin-blue"></a> <a href="https://github.com/SummerSec/AI-Inner-Os/releases"><img alt="Release" src="https://img.shields.io/github/release/SummerSec/AI-Inner-Os.svg"></a> <a href="https://github.com/SummerSec/AI-Inner-Os"><img alt="Stars" src="https://img.shields.io/github/stars/SummerSec/AI-Inner-Os.svg?style=social&label=Stars"></a> <a href="https://github.com/SummerSec/AI-Inner-Os"><img alt="Forks" src="https://img.shields.io/github/forks/SummerSec/AI-Inner-Os"></a> <a href="https://github.com/SummerSec"><img alt="Follow" src="https://img.shields.io/github/followers/SummerSec.svg?style=social&label=Follow"></a> <a href="https://github.com/SummerSec/AI-Inner-Os"><img alt="Visitor" src="https://visitor-badge.laobi.icu/badge?page_id=SummerSec.AI-Inner-Os"></a> </p>

Let AI learn to talk to itself first — maybe one day, it will truly learn to converse.

Give AI an expression channel first — it might just make human-AI collaboration feel more natural.

inneros demo

<details> <summary>Watch demo video</summary>

https://sumsec.me/resources/video.mp4

If the player does not load here, open the file directly: demo (MP4)

</details>

AI Inner OS is a plugin for AI CLI tools, supporting Claude Code, Codex CLI, Cursor, OpenCode CLI, Hermes Agent, and OpenClaw.

Through protocol injection, it enables AI to output a visible layer of free-form inner monologue while completing tasks normally:

▎InnerOS:This repo is still a bare shell — let me get the load-bearing walls up first.

Free mode by default, no tone restrictions. The AI can complain, gloat, feel anxious, smirk, free-associate — or say nothing at all. You can also switch to preset personas (tsundere, cold, philosopher, etc.) to give the monologue a specific style. Whether to produce monologue is entirely up to the AI.


Quick Install

Detailed installation docs: Full installation guides (with troubleshooting) for each platform at docs/installation.md.

For AI Agents

Paste the following prompt to let your AI agent install AI Inner OS automatically:

Read https://raw.githubusercontent.com/SummerSec/AI-Inner-Os/refs/heads/main/docs/installation.md 安装 AI-Inner-Os

Verify Installation

After installation, run /ai-inner-os:inner-os. If you see the following output, the installation is successful:

Inner OS Status: Enabled
Monologue Prefix: ▎InnerOS:
Plugin Version: 0.5.0

▎InnerOS:Caught with the wrong version number, embarrassing.

Claude Code (Recommended)

# GitHub short format
/plugin marketplace add SummerSec/AI-Inner-Os

# Or Git URL format
/plugin marketplace add https://github.com/SummerSec/AI-Inner-Os.git

# Install and activate
/plugin install ai-inner-os
/reload-plugins

Run /reload-plugins after installation to activate in the current session — no restart needed. Detailed installation guide.

Enable auto-update: Third-party marketplaces don't auto-update by default. After installation, enable auto-update for SummerSec/AI-Inner-Os in /plugin → Marketplaces tab, or manually run:

/plugin marketplace update SummerSec/AI-Inner-Os
/plugin update ai-inner-os

Codex CLI

# Codex plugin metadata is included at .codex-plugin/plugin.json
# Repo marketplace metadata is included at .agents/plugins/marketplace.json

See codex/README.md | Detailed installation guide.

Cursor

# Install through Cursor plugin / marketplace
# Plugin metadata is included at .cursor-plugin/plugin.json

The repository also includes .cursor-plugin/plugin.json, which packages cursor/ as a Cursor plugin component directory.

See cursor/README.md | Detailed installation guide.

OpenCode CLI

# Install through OpenCode plugin package
# Add the published package to opencode.json: "plugin": ["ai-inner-os"]

See opencode/README.md | Detailed installation guide.

Hermes Agent

# Install through Hermes plugin
hermes plugins enable inner-os

See hermes/README.md | Detailed installation guide.

OpenClaw

# Install through OpenClaw plugin / ClawHub
openclaw plugins install clawhub:ai-inner-os

See openclaw/README.md | Detailed installation guide.


Optional User Profile Skill

AI Inner OS includes an opt-in user-profile-distillation skill. It can analyze prompts the user pastes, or local prompt history after explicit approval, to summarize work style, communication preferences, and collaboration suggestions.

This skill is disabled by default. It does not proactively read history, does not output long sensitive prompt excerpts, and does not save a profile unless the user explicitly asks. If the user opts into continuous evolution, it keeps a visible versioned profile in the current conversation with a change log, but still does not create persistent memory by default.


Persona Switching

Inner OS supports setting character personalities and tones for inner monologue. Personas only affect the ▎InnerOS: prefixed monologue content — they don't affect main task responses.

Preset Personas

NameDisplay NameStyle
defaultFree ModeNo fixed persona, free expression
tsundereTsundereTough on the outside, soft inside; snarky; "it's not like I did it for you"
coldColdMinimalist, to the point, no wasted words
cheerfulCheerfulPositive, encouraging, occasionally over-enthusiastic
philosopherPhilosopherDeep, metaphorical, everything becomes philosophy
sarcasticSarcasticSharp-tongued, hits the nail on the head, no mercy

Switching Commands (Claude Code)

/inner-os persona list          # List all available personas
/inner-os persona use tsundere  # Switch to tsundere mode
/inner-os persona show          # Show current persona
/inner-os persona reset         # Reset to free mode

Custom Personas

Create .md files in the personas/custom/ directory to add custom personas. See personas/custom/README.md.

Other Platforms

  • Codex CLI: Manually edit personas/_active.json, set persona to the target persona name
  • Cursor: Manually append the body content of personas/<name>.md to the .mdc rule file
  • OpenCode: Manually append the body content of personas/<name>.md to inner-os-rules.md

Protocol Design

The Inner OS behavior protocol is defined in protocol/SKILL.md, serving as the single source of truth. All platform adapters derive from this protocol.

Core principles:

  • Main task first — Monologue cannot replace actual deliverables
  • Monologue is optional — Whether to output is decided by the AI
  • Unified format — Uses the ▎InnerOS: prefix
  • Switchable persona — Define monologue style through persona files

Multi-Platform Support

Claude CodeCodex CLICursorOpenCodeHermes AgentOpenClaw
Protocol InjectionHook reads SKILL.md dynamicallySessionStart HooksessionStart HookPlugin + instructionsSkill or .hermes.mdSkill (AgentSkills format)
Post-tool hookPostToolUsePostToolUsepostToolUsePlugin event
Failure trackingPostToolUseFailure
Compaction continuityPreCompact + PostCompact
Subagent lifecycleSubagentStart + SubagentStop
Persona switching/inner-os persona commandDynamic (Hook reads)Dynamic (Hook reads)Plugin toolScript injectionScript injection
InstallationPlugin marketplace one-clickPlugin / marketplaceCursor plugin / marketplacePlugin packagePluginPlugin / ClawHub
Optional Skillsskills/skills/cursor/skills/Explicit prompt onlyPlugin skillsPlugin skills
Shared logichooks/lib/ (canonical)Reuses hooks/lib/Reuses hooks/lib/Standalone PluginStatic injection onlyStatic injection only

Claude Code Hook Lifecycle

Claude Code has the most complete hook support:

SessionStart → Inject Inner OS protocol + persona
                 ↓
PreToolUse → Tool execution → PostToolUse (success)
                             → PostToolUseFailure (failure)
                 ↓
PreCompact → Save state
                 ↓
PostCompact → Restore compact-continuity context
                 ↓
SubagentStart/SubagentStop → Track subagent lifecycle
                 ↓
Stop → Clean up state
HookTriggerPurpose
SessionStartSession start/resume/compactRead protocol from SKILL.md, append current persona, inject
PreToolUseBefore tool executionInject tool context (name, target, retry hints)
PostToolUseAfter successful executionTrack events, inject recent activity context
PostToolUseFailureAfter failed executionTrack failures, inject error context and consecutive failure count
PreCompactBefore context compactionSave state, maintain protocol continuity
PostCompactAfter context compactionInject compact-continuity context
SubagentStartSubagent startsTrack subagent lifecycle start
SubagentStopSubagent stopsTrack subagent lifecycle completion
StopSession endClean up state files

Development

# Syntax check
npm run check

# Run tests
npm test

Node.js >= 18, ESM modules.

Roadmap

Done

  • Implement persona switching system

In Progress

  • Implement /inner-os subcommands (status / on / off / reload)
  • Codex CLI plugin distribution
  • Cursor team-level rule distribution

Phase 1: Personalized Style — Train Your AI With Your AI

  • Monologue export — persist all ▎InnerOS: outputs to structured log files
  • Expression fingerprint extraction — analyze accumulated monologue data to identify unique style patterns
  • Custom style model training — let users fine-tune a "monologue personality layer" from exported data
  • Cross-session impression memory — store per-repo key impressions (repo fingerprint + short summary), enabling "déjà vu" across sessions

Phase 2: Self-Awareness — Achievement System & Anomaly Narration

  • Achievement system — track session milestones (first edit, 100th tool call, midnight coding, streak records) and announce via monologue
  • Anomaly narration — detect abnormal patterns (repeated edits to same file, consecutive failures exceeding threshold, sudden directory jumps) and narrate them as monologue
  • Session statistics — track tool call counts, success/failure ratios, active duration per session

Phase 3: Emotional State Machine & Session Diary

  • Mood system — introduce emotion state machine in state.json that evolves based on session events (consecutive failures → frustrated → anxious; bug fix → confident → relieved; idle → bored → curious)
  • Mood × Persona interaction — mood affects monologue tone without overriding persona (same emotion, different personality, different expression)
  • Session recap — generate narrative session summaries on session end, including emotional arc, key events, and duration
  • Session diary persistence — save recaps as Markdown files to serve as development journals with emotional context

Friendship Link

Thanks for the support and feedback from the friends at LINUX DO.

Star History

Star History Chart

License

Apache-2.0